Method and device for conducting trusted remote payment transactions

• US 9,665,864 B2
• Filed: 05/21/2010
• Issued: 05/30/2017
• Est. Priority Date: 05/21/2010
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Prakash, Gyan, Aissi, Selim
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): MCINTYRE, CHARLES AARON
• Application Number:
  US12/785,138
• Publication Number:
  US 20110289004A1
• Time in Patent Office: 2,566 Days
• Field of Search: 705 64
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/223 based on the use of peer-to-peer networks
• CPC Class Codes: G06Q 20/3223 Realising banking transactions through M-devices
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/326 Payment applications installed on the mobile devices
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation

Abstract

A method, device, and system for conducting trusted payment transactions including establishing a trust relationship between a first mobile computing device and a second mobile computing device. The first mobile computing device may initiate a payment transaction with a point-of-sale device, communicate with the second mobile communication device to retrieve payment information from the second mobile communication device, and complete the payment transaction with the point-of-sale device using the payment information. The second mobile computing device is configured to verify the user and identity of the first mobile computing device prior to providing the payment information. Communications between the mobile computing devices may be encrypted using pre-determined encryption techniques.

Claims

1. A method comprising:

establishing a trust relationship between a first mobile phone and a second mobile phone over a Near Field Communication link, by verifying a physical presence of the first mobile phone relative to the second mobile phone;

initiating, by the first mobile phone, a payment transaction with a point-of-sale device;

receiving, with the first mobile phone, a payment request from the point-of-sale device in response to initiating the payment transaction with the point-of-sale device;

transmitting, by the first mobile phone and in response to initiating the payment transaction, the payment request received from the point-of-sale device to the second mobile phone over a cellular network, wherein the cellular network is different from the Near Field Communication Link;

receiving, by the first mobile phone, payment information from the second mobile phone in response to the transmittal of the payment request, wherein the payment information includes account information associated with a user of the second mobile phone; and

completing, by the first mobile phone, the payment transaction with the point-of-sale device using the payment information received from the second mobile phone.

2. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises verifying the physical presence of the first mobile phone relative to the second mobile phone.

3. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises exchanging, between the first and second mobile phones, unique identification numbers that identify the corresponding first and second mobile phone.

4. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises receiving, with the first mobile phone, a shared passkey from the second mobile phone.

5. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises transmitting a list of applications from the first mobile phone to the second mobile phone, the list of applications identifying applications executed on the first mobile phone that are authorized to request payment information from the second mobile phone.

6. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises receiving, with the first mobile phone, a public key of a public/private key pair from the second mobile phone over the Near Field Communication link.

7. The method of claim 6, wherein transmitting the payment request to the second mobile phone over the cellular network comprises establishing a secured communication connection between the first mobile phone and the second mobile phone using the public key received over the Near Field Communication link.

8. The method of claim 1, wherein establishing a trust relationship between the first mobile phone and the second mobile phone comprises receiving, with the first mobile phone, payment parameters from the second mobile phone, the payment parameters identifying at least one of:

a maximum currency amount per transaction and a time period during which the payment information may be obtained from the second mobile phone.

15. The method of claim 1, wherein:

establishing the trust relationship between the first mobile phone and the second mobile phone over the Near Field Communication link comprises receiving, with the first mobile phone, payment parameters from the second mobile phone; and

communicating with the second mobile phone over the cellular network comprises communicating with the second mobile phone over the cellular network in response to a determination that the payment transaction has been previously authorized as a function of the payment parameters.

9. One or more non-transitory, machine readable media comprising a plurality of instructions that, when executed by a first mobile computing device, result in the first mobile computing device:

establishing a trust relationship with a second mobile computing device using a Near Field Communication link, by verifying a physical presence of the first mobile phone relative to the second mobile phone;

initiating a payment transaction with a point-of-sale device;

establishing, in response to the initiation of the payment transaction, a secured, wireless communication connection over a cellular network with the second mobile computing device to request payment information therefrom, the cellular network being different from the Near Field Communication link, and the second mobile computing device being remote from the first computing device and the point-of-sale device, wherein the payment information includes account information associated with a user of the second mobile phone; and

completing the payment transaction with the point-of-sale device using the payment information received from the first mobile computing device.

10. The one or more non-transitory, machine readable media of claim 9, wherein establishing a trust relationship with the second mobile computing device comprises verifying the physical presence of the second mobile computing device relative to the first mobile computing device using the Near Field Communication link.

11. The one or more non-transitory, machine readable media of claim 9, wherein establishing a trust relationship with the second mobile computing device comprises:

exchanging, with the second mobile computing device, unique identification numbers that identify the corresponding first and second mobile computing devices using the Near Field Communication link;

receiving a shared passkey from the second mobile computing device using the Near Field Communication link; and

receiving a public key of a public/private key pair from the second mobile computing device using the Near Field Communication link.

12. The one or more non-transitory, machine readable media of claim 9, wherein establishing a trust relationship with the second mobile computing device further comprises receiving payment parameters from the second mobile computing device, the payment parameters identifying a maximum currency amount per transaction.

13. The one or more non-transitory, machine readable media of claim 9, wherein the plurality of instructions further result in the first mobile computing device:

prompting a user for entry of a passkey; and

verifying the entered passkey,

wherein establishing a secured, wireless communication connection over a cellular network with the second mobile computing device comprises establishing a secured, wireless communication connection over a cellular network with the second mobile computing device in response to the passkey being verified.

14. The one or more non-transitory, machine readable media of claim 9, wherein establishing a secured, wireless communication connection over a cellular network with the second mobile computing device comprises:

receiving a payment request from the point-of-sale device;

transmitting the payment request to the second mobile computing device;

receiving encrypted payment information from the second mobile computing device in response to the payment request; and

decrypting the encrypted payment information using a public key of a public/private key pair generated by the second mobile computing device.

16. The one or more non-transitory, machine readable media of claim 9, wherein:

establishing the trust relationship with the second mobile computing device using the Near Field Communication link comprises receiving payment parameters from the second mobile computing device; and

establishing the secured, wireless communication connection over the cellular network with the second mobile computing device comprises establishing a secured, wireless communication connection over the cellular network with the second mobile computing device in response to a determination that the payment transaction has been previously authorized as a function of the payment parameters.